Vulnerability Intelligence Report
CVE-2019-19840
A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:4.13%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| ruckuswireless | unleashed | all |
| ruckuswireless | c110 | all |
| ruckuswireless | e510 | all |
| ruckuswireless | h320 | all |
| ruckuswireless | h510 | all |
| ruckuswireless | m510 | all |
| ruckuswireless | r310 | all |
| ruckuswireless | r320 | all |
| ruckuswireless | r510 | all |
| ruckuswireless | r610 | all |
| ruckuswireless | r710 | all |
| ruckuswireless | r720 | all |
| ruckuswireless | t310 | all |
| ruckuswireless | t610 | all |
| ruckuswireless | t710 | all |
| ruckuswireless | zonedirector_1200_firmware | all |
| ruckuswireless | zonedirector_1200 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.126%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2019-12-17T00:00:00 |
| Published | 2020-01-22T20:32:36 |
| Last Updated | 2024-08-05T02:25:12 |
Community Chatter & Buzz